CVEs published May 29, 2020
41 CVEs were published on May 29, 2020: 3 critical, 2 high. 1 is now in CISA KEV.
- Published
- 41
- Critical
- 3
- High
- 2
- Medium
- 7
- Low
- 8
- Unrated
- 21
- Now in CISA KEV
- 1
- Fix available
- 9
Most affected products
- FreeRDP
- 13
- snyk-broker
- 6
- HUAWEI Mate
- 3
- VMware ESXi · VMware Workstation +1
- 2
- ABB Device Library Wizard
- 1
- Cybozu Android App 'kintone mobile for Android'
- 1
- Cybozu Android App 'Mailwise for Android'
- 1
- Huawei CloudEngine · Huawei NE40E +2
- 1
- Huawei E6878-370
- 1
- Huawei Honor
- 1
Critical 3
- CVE-2020-11844Incorrect Authorization vulnerability in the Micro Focus Container Deployment Foundation affecting multiple products.Micro Focus Hybrid Cloud Management · Micro Focus ArcSig… +8
- CVE-2020-8816Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease.
- CVE-2020-12493Critical Vulnerability in SWARCO CPU LS4000SWARCO CPU LS4000
High 2
Medium, low and unrated 36
- CVE-2020-6937A Denial of Service vulnerability in MuleSoft Mule CE/EE 3.8.x, 3.9.x, and 4.x released before April 7, 2020, could allow remote attackers tMuleSoft Mule CE/EE
- CVE-2020-7650All versions of snyk-broker after 4.72.0 including and before 4.73.1 are vulnerable to Arbitrary File Read.snyk-broker
- CVE-2020-7654All versions of snyk-broker before 4.73.1 are vulnerable to Information Exposure.snyk-broker
- CVE-2020-7648All versions of snyk-broker before 4.72.2 are vulnerable to Arbitrary File Read.snyk-broker
- CVE-2020-7651All versions of snyk-broker before 4.79.0 are vulnerable to Arbitrary File Read.snyk-broker
- CVE-2020-7652All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read.snyk-broker
- CVE-2020-7653All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read.snyk-broker
- CVE-2020-1831HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.195(SP31C00E74R3P8) have an improper authorization vulnerability.HUAWEI Mate
- CVE-2020-1833Honor 9X smartphones with versions earlier than 9.1.1.172(C00E170R8P1) have an improper authentication vulnerability.Huawei Honor
- CVE-2020-3959VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.1.0) and VMware FusionVMware ESXi · VMware Workstation +1
- CVE-2020-3958VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.5.2) and VMware FusionVMware ESXi · VMware Workstation +1
- CVE-2020-3957VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior) and VMware Horizon Client for Mac (5.x and prior) containVMware Fusion · VMware Remote Console for Mac +1
- CVE-2020-1809HUAWEI Mate 10 smartphones with versions earlier than 10.0.0.143(C00E143R2P4) have an information disclosure vulnerability.HUAWEI Mate
- CVE-2020-1797HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.185(C00E74R3P8) have an improper authorization vulnerability.HUAWEI Mate
- CVE-2020-1870There is a denial of service vulnerability in some Huawei products.Huawei CloudEngine · Huawei NE40E +2
- CVE-2020-1832E6878-370 products with versions of 10.0.3.1(H557SP27C233) and 10.0.3.1(H563SP1C00) have a stack buffer overflow vulnerability.Huawei E6878-370
- CVE-2020-1798HUAWEI P30 smartphones with versions earlier than 10.1.0.135(C00E135R2P11) have an improper authentication vulnerability.HUAWEI P30
- CVE-2020-13634In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of
- CVE-2020-12675The mappress-google-maps-for-wordpress plugin before 2.54.6 for WordPress does not correctly implement capability checks for AJAX functions
- CVE-2020-4490IBM Business Automation Workflow 18 and 19, and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote attacker to bypass securIBM Business Process Manager Advanced · IBM Business Automa…
- CVE-2020-4352IBM MQ on HPE NonStop 8.0.4 and 8.1.0 is vulnerable to a privilege escalation attack when running in restricted mode.IBM MQ for HPE NonStop
- CVE-2020-4306IBM Planning Analytics Local 2.0.0 through 2.0.9 is vulnerable to cross-site scripting.IBM Planning Analytics Local
- CVE-2020-5572Android App 'Mailwise for Android' 1.0.0 to 1.0.1 allows an attacker to obtain credential information registered in the product via unspecifCybozu Android App 'Mailwise for Android'
- CVE-2020-5573Android App 'kintone mobile for Android' 1.0.0 to 2.5 allows an attacker to obtain credential information registered in the product via unspCybozu Android App 'kintone mobile for Android'
- CVE-2020-11017Double free in cliprdr_server_receive_capabilities in FreeRDPFreeRDP
- CVE-2020-11018Out of bound read in cliprdr_server_receive_capabilities in FreeRDPFreeRDP
- CVE-2020-11019Out of bound read in update_recv in FreeRDPFreeRDP
- CVE-2020-11038Integer Overflow to Buffer Overflow in FreeRDPFreeRDP
- CVE-2020-11040Out-of-bounds Read in FreeRDPFreeRDP
- CVE-2020-11041Improper Validation of Array Index in FreeRDPFreeRDP
- CVE-2020-11043Out-of-bounds Read in FreeRDPFreeRDP
- CVE-2020-11085Out-of-bounds Read in FreeRDPFreeRDP
- CVE-2020-11086Out-of-bounds Read in FreeRDP `ntlm_read_ntlm_v2_response`FreeRDP
- CVE-2020-11087Out-of-bounds Read in FreeRDPFreeRDP
- CVE-2020-11088Out-of-bound read in FreeRDPFreeRDP
- CVE-2020-11089Out-of-bound read in FreeRDPFreeRDP